Subscriber identity module (SIM) for mobile stations

ABSTRACT

Methods and systems for associating a mobile station subscriber with at least one application or service are provided. The subscriber is provided with a subscriber identity module (“SIM”) identifier, which identities a SIM associated with the subscriber. The SIM identifier is bound to the application or service. The SIM identifier and the application or service are registered with a home location register (“HLR”) to bind the SIM identifier to the application or service. If the SIM is a virtual SIM, the provider of an application or service may cover the data costs associated with the use of that application or service.

RELATED APPLICATION(S)

This Application is a Continuation of, and claims benefit from, U.S.patent application Ser. No. 12/415,700 that was filed on Mar. 31, 2009,and that is incorporated herein by reference in its entirety.

BACKGROUND

Wireless communication networks such as CDMA and TDMA-based networks arerapidly being deployed worldwide. One example of such a network is theGlobal system for mobile communication (GSM). GSM providescircuit-switched data services to subscribers, such as mobile telephoneor computer users. General Packet Radio Service (GPRS), which is anextension to GSM technology, introduces packet switching to GSMnetworks. GPRS uses a packet-based wireless communication technology totransfer high and low speed data and signaling in an efficient manner.GPRS optimizes the use of network and radio resources, thus enabling thecost effective and efficient use of GSM network resources for packetmode applications.

The rapid growth in sophistication of wireless communication networks aswell as the mobile devices used to communicate over such networks islikely to give rise to an ever increasing number of services andfeatures that can be offered on these various devices. As the number andsophistication of such services and features continue to grow, manydifferent software applications will be required for theirimplementation. Some of these applications will reside on the mobiledevice itself and others will reside in whole or in part on a networkserver that the mobile device will access on-line. Techniques andmechanisms for limiting access to these applications and services toauthorized subscribers can be complex and cumbersome to implement. Inaddition, many consumers may not have subscription plans that allow themto access these on-line services without paying additional fees.

This Background is provided to introduce a brief context for the Summaryand Detailed Description that follow. This Background is not intended tobe an aid in determining the scope of the claimed subject matter nor beviewed as limiting the claimed subject matter to implementations thatsolve any or all of the disadvantages or problems presented above.

SUMMARY

When a mobile subscriber wishes to make use of various applications andservices over a wireless network it is important to ensure that thesubscriber is authorized to access them. Illustrative examples of suchapplications and service include without limitation, mappingapplications and services, business grade e-mail, location basedservices, e-commerce services and the like. One convenient way toestablish an association between the subscriber and the applications andservices is to bind a unique subscriber identity module (SIM) to eachapplication or service (or group of applications or services) that thesubscriber is authorized to access.

In one illustrative example, a method is provided for associating amobile station subscriber with at least one application or service. Inorder to establish this association, the subscriber is provided with aSIM identifier identifying a SIM associated with a subscriber. The SIMidentifier is to be bound to the application or service that thesubscriber is authorized to access over a wireless network. The SIMidentifier and the application or service is registered with a homelocation register (HLR) so that the SIM identifier is thereby bound tothe application or service.

This Summary is provided to introduce a selection of concepts in asimplified form that is further described below in the DetailedDescription. This summary is not intended to identify key features oressential features of the claimed subject matter, nor is it intended tobe used as an aid in determining the scope of the claimed subjectmatter. Additional features and advantages of the invention will be madeapparent from the following detailed description of embodiments thatproceeds with reference to the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is an overview of one example of a wireless communicationenvironment.

FIG. 2 shows one example of a mobile station that incorporates anapplication-specific SIM.

FIG. 3 shows one example of a virtual application-specific SIM.

FIG. 4 is a flowchart illustrating one particular example of a methodfor associating a mobile station subscriber with at least oneapplication or service.

DETAILED DESCRIPTION

The methods and techniques described herein may be implemented in a widevariety of different wireless networks in which a mobile station such asa mobile phone employs a SIM. For instance, in some examples thewireless network may be a 2G radio system such as a GSM (Global Systemfor Mobile Communications), which is based on TDMA (Time DivisionMultiple Access) technology. In other examples, the wireless network maybe a 3G radio system which is based on a GSM system which utilizes WCDMA(Wideband Code Division Multiple Access) technology or a UMTS (UniversalMobile Telecommunications System). In a UMTS-based network the SIM issometimes referred to as a USIM (Universal Subscriber Identity Module),whereas in CDMA-based network the SIM is sometimes referred to as a RUIM(Removable User Identity Module). For simplicity all of these moduleswill be generically referred to herein as a SIM. For purposes ofillustration only the present invention will be described in the contextof a GSM network that includes a GPRS network for providinginternetworking with external packet-switched networks.

FIG. 1 shows a GSM/GPRS network architecture 100 that includes a GSMcore network 101 and a GPRS network 130. The GSM core network 101includes a Mobile Station (MS) 102, at least one Base TransceiverStation (BTS) 104 and a Base Station Controller (BSC) 106. The MS 102 isphysical equipment or Mobile Equipment (ME), such as a mobile phone or alaptop computer that is used by mobile subscribers. Each subscriber 140is characterized by a relation between the subscribers 140 and themobile stations 102 the subscriber uses. The mobile stations 102 alsohave a unique identity, defined by the IMEISV. In order to associate thesubscriber and the mobile station 102, a SIM card 105 is introduced inthe mobile station 102. The position of the SIM card 105 constitutes theconnection with the mobile station 102, while the connection between theSIM card 105 and the subscriber 140 is made by an agreement registeredin a database. The SIM card 105 also has an identifier, defined by theInternational Mobile Subscriber Identity (IMSI). As a summary, thesubscriber is identified by the MSISDN, the SIM card by the IMSI and themobile station by the IMEISV.

The BTS 104 is physical equipment, such as a radio tower, that enables aradio interface to communicate with the MS. Each BTS may serve more thanone MS. The BSC 106 manages radio resources, including the BTS. The BSCmay be connected to several BTSs. The BSC and BTS components, incombination, are generally referred to as a base station (BSS) or radioaccess network (RAN) 103.

The GSM core network 101 also includes a Mobile Switching Center (MSC)108, a Gateway Mobile Switching Center (GMSC) 110, a Home LocationRegister (HLR) 112, Visitor Location Register (VLR) 114, anAuthentication Center (AuC) 116, and an Equipment Identity Register(EIR) 118. The MSC 108 performs a switching function for the network.The MSC 108 also performs other functions, such as registration,authentication, location updating, handovers, and call routing. The GMSC110 provides a gateway between the GSM network and other networks, suchas an Integrated Services Digital Network (ISDN) or Public SwitchedTelephone Networks (PSTNs) 120. In other words, the GMSC 110 providesinterworking functionality with external networks.

The HLR 112 is a database that contains administrative informationregarding each subscriber registered in a corresponding GSM network. TheHLR 112 also contains the current location of each MS. The HLR 112stores details of every SIM issued by the mobile operator. Individualsubscriber records are typically accessed by the IMSI and/or the MSISDN,which serve as primary keys to the records.

The VLR 114 is a database that contains selected administrativeinformation from the HLR 112. The VLR 114 contains information necessaryfor call control and provision of subscribed services for each MScurrently located in a geographical area controlled by the VLR 114. TheHLR 112 and the VLR 114, together with the MSC 108, provide the callrouting and roaming capabilities of GSM. The VLR 114 may reside on thesame platform as the MSC 108 or the GMSC 110 or a call server. The AuC116 provides the parameters needed for authentication and encryptionfunctions. Such parameters allow verification of a subscriber'sidentity. The EIR 118 stores security-sensitive information about themobile equipment.

Location services (LCS) are provided by a Gateway Mobile Location Center(GMLC) 111 and/or a Serving Mobile Location Center (SMLC) 113. The GMLC111 may request routing information from the HLR 112 and sendpositioning requests to either the Visited Mobile Switching Centre(VMSC, not shown), a Serving GPRS Support Node (SGSN 132) or MSC 108,and receives final location estimates from the corresponding entity.

The SMLC 113 is either a separate network element or an integratedfunctionality in the BSC 106. The SMLC manages the overall coordinationand scheduling of resources required for the location of a MS 102. TheSMLC 1113 also calculates the final location estimate and estimates theachieved accuracy. The SMLC 113 may control a number of LocationMeasurement Unit (LMU) for the purpose of obtaining radio interfacemeasurements to locate or help locate MS subscribers in the area that itserves.

To gain access to GSM services, such as speech, data, and short messageservice (SMS), the MS first registers with the network to indicate itscurrent location by performing a location update and IMSI attachprocedure. The MS 102 sends a location update including its currentlocation information to the MSC 108/VLR 114, via the BTS 104 and the BSC106. The location information is then sent to the MS's HLR 112. The HLR112 is updated with the location information received from the MSC108/VLR 114. The location update also is performed when the MS moves toa new location area. Typically, the location update is periodicallyperformed to update the database as location updating events occur.

The GPRS network 130 is logically implemented on the GSM core networkarchitecture by introducing two packet-switching network nodes, theserving GPRS support node (SGSN) 132 and a Gateway GPRS support node(GGSN) 134. The SGSN 132 is at the same hierarchical level as the MSC108 in the GSM network. The SGSN 132 controls the connection between theGPRS network and the MS 102. The SGSN 132 also keeps track of individualMS's locations and security functions and access controls. The GGSN 134provides a gateway between the GPRS network and a public packet network(PDN) or other IP networks 136. That is, the GGSN provides interworkingfunctionality with external networks, and sets up a logical link to theMS through the SGSN 132. When packet-switched data leaves the GPRSnetwork, it is transferred to an external TCP-IP network 136, such as anX.25 network or the Internet. In order to access GPRS services, the MSfirst attaches itself to the GPRS network by performing an attachprocedure. The MS then activates a packet data protocol (PDP) context,thus activating a packet communication session between the MS, the SGSN132, and the GGSN.

In a GSM/GPRS network, GPRS services and GSM services can be used inparallel. The MS can operate in one three classes: class A, class B, andclass C. A class A MS can attach to the network for both GPRS servicesand GSM services simultaneously. A class A MS also supports simultaneousoperation of GPRS services and GSM services. For example, class Amobiles can receive GSM voice/data/SMS calls and GPRS data calls at thesame time. A class B MS can attach to the network for both GPRS servicesand GSM services simultaneously. However, a class B MS does not supportsimultaneous operation of the GPRS services and GSM services. That is, aclass B MS can only use one of the two services at a given time. A classC MS can attach for only one of the GPRS services and GSM services at atime. Simultaneous attachment and operation of GPRS services and GSMservices is not possible with a class C MS.

As previously mentioned, subscribers are increasingly using their mobilestations to access a wide variety of different applications and servicesabove and beyond their normal wireless mobile telephony services (e.g.,the aforementioned class A, B and C service levels) that allow them tocommunicate voice and data over a wireless network. Examples of suchapplications and services include, without limitation, mappingapplications and services, instant messaging, business grade e-mail,location based services, e-commerce services and the like. In order fora mobile subscriber to access such applications and services over thewireless network it is important to associate the subscriber with thespecific applications and services that the subscriber is authorized toaccess. In this way third party spoofing can be prevented so thatunauthorized third parties do not gain access to the applications andservices. One way to establish this association is to bind a unique SIMto each application or service (or group of applications or services)that the subscriber is authorized to access. Such a SIM is referred tohereinafter as an application-specific SIM.

Such application-specific SIMs can be distributed to the mobilesubscribers in a variety of different ways. For instance, SIM cards canbe provided by the mobile device manufacturers themselves or by otherdistributors and may be made available for purchase at retail outlets.In another implementation a virtual SIMs may be downloaded to the mobiledevice over the wireless network as part of a service application orseparately from a service application. In a virtual SIM, thefunctionality of one or more hardware-based SIM cards is implemented byembedded software residing on the mobile station as part of a standaloneservice application, part of the mobile operating system, or as a commoncomponent shared by service applications needing at access the network.The software therefore emulates the functions of the SIM card(s).

Regardless of the manner in which the application-specific SIM isacquired, after the SIM registers with the HLR the HLR will maintain arecord that associates the IMSI of the application-specific SIM and theapplication(s) and/or services that the SIM is authorized to access. TheHLR that maintains these records may be the HLR associated with thewireless system operator, such as 112 shown in FIG. 1. Alternatively,the HLR may be a separate HLR that is operated by a third party for thepurpose of providing the mobile station with access to packet-network(e.g., Internet) based applications and/or services. The third party HLRwill then need to communicate with the wireless communication system'sinfrastructure in order to establish a connection between the mobilestation and the Internet-based entity that provides the application(s)and/or services. In FIG. 1 this entity is shown as application server150. Typically, though not necessarily, the operator of applicationserver 150 will bear the cost for establishing the connection betweenthe mobile station and the HLR.

An example of a mobile station that incorporates an application-specificSIM is shown in FIG. 2. The mobile station 414 includes a CPU (CentralProcessing Unit) 402 that communicates over a connection or bus 410 withnon-volatile storage 403 where various programs in the form of softwareinstructions control the several devices 405, 406, 404, and 417, andperform their functions in the mobile station by being interpreted bythe CPU. When the mobile station is powered on, the CPU 402 may copy theprograms to Random Access Memory 401 over a connection or bus 409, ormay run the programs directly from non-volatile storage 403. The mobilestation typically has an output device 404, such as a screen or aspeaker that communicates over connection 412 to the CPU 402. Thisoutput device 404 can be controlled by the programs resident innon-volatile memory 403 or random access memory 401. The device alsotypically has an input device 405 such as a keyboard, a mouse, or amicrophone that communicates to the CPU 402 over connection 413. Thisinput device 405 can be controlled by the programs resident innon-volatile memory 403 or random access memory 401. The mobile stationhas a WLAN radio 406 or equivalent that is connected to the CPU 402 overa connection or bus 411 and connected to an antenna 407 over connection408. A SIM reader 416 is connected to the CPU 402 via connection 415.The SIM reader can accept a SIM card 417 and send and receiveinformation from the SIM card 417. The SIM Card information is sent tothe CPU 402 over connection or bus 415.

As previously mentioned, in some implementations a virtual SIM card isemployed in which the SIM card functionality is implemented within asoftware program executed by the CPU 402. In other words, virtual SIMmodules operating on the CPU of the mobile station replace physical SIMcards.

FIG. 3 shows one implementation of a virtual SIM module in which theelementary data storage of the SIM card occupies a portion of thenon-volatile memory 403 and SIM function emulation software operates onthe embedded CPU 402. The SIM function emulation software includesfunctional algorithms executed by the SIM cards of the prior art. Thevirtual SIM modules have the advantage that no additional hardwareoutside the control system is necessary. Furthermore, a single virtualSIM module can provide the functionality of multiple SIM cards, therebyeliminating the need to remove and install a new SIM card each and everytime the subscriber wishes to access a different application or service.In addition the virtual SIM card and the physical SIM card can be fromthe same or different service providers. In this way different serviceproviders can use different economic models when offering services toconsumers, and in some scenarios they could provide a user free orsubsidized access to online services of a particular online servicescompany. A virtual SIM can become a powerful tool in helping consumerswho do not have data plans enjoy the benefits of data plans by beingable to access online services, and having the service providersubsidize the costs of the data traffic to attract, retain, and growmobile consumers who use particular online services.

In FIG. 3 the unique SIM data 210 normally installed into individualphysical SIM cards are encrypted and stored in non-volatile memory 403.As shown, the SIM data typically includes the MSISDN, the IMSI and theIMEISV, SIM data 210 are stored as a data file 220 having a formsuitable for use by an embedded processor such as CPU 402 shown in FIG.2, or another embedded micro-processor accessible by the mobile station.In this way the data file 220 can accommodate the equivalent of multiplephysical SIM cards.

Emulation software 230 implements all the functions normally performedby physical SIM card 417. The functions are implemented in one or moresoftware program modules loaded into and executed by the CPU 402.Emulation software 230 includes one or more software modules forperforming all normal SIM card functions, including accessing theSIM-unique data and unique subscriber identity data 210 stored in thenon-volatile memory; decrypting the data where necessary; and performingauthentication functions requested by external devices or networks.

One example of an application-specific virtual SIM of the type describedabove is a diagnostic SIM, which will be described below. Mobilestations such as mobile phones are increasingly complex devices that canrequire service and support throughout their life cycle. Such supportmay be needed beginning with the initial setup and configuration of theMS, and can re-occur many times during its life as configuration orother settings are lost such as may occur when the device requires ahard reset to the factory configuration. Support may also be needed whena failure causes the MS to be rendered unusable as a phone, an Internetconnected device or both.

An increasingly important tool in resolving issues that arise withmobile phones is diagnostic software that resides on a PC or othercomputer. In addition to diagnosing problems, the software may updatethe mobile phone using information available on the PC itself orinformation such as updated configuration, settings, operating systemimages, and the like that are downloaded by the PC over the Internet.

However, it is not always convenient for a user to connect the mobilephone to a PC since a PC may not be available. Thus, the use of a PC asa tool for problem resolution may not be an option. A diagnostic SIM canresolve this problem, even when the mobile phone or other MS is in astate where it has been rendered unusable due to some fault. Thediagnostic SIM can provide a guaranteed data connection to a diagnosticserver via an HRL from which the device can receive diagnostic services,device images, operating system updates, feature updates, or other datato restore the MS to a known or desired working state.

In some implementations the guaranteed data connection will be madeavailable regardless of whether the user has subscribed for data accessfrom their Mobile Operator and regardless of where in the world they arelocated, even if they do not have a global roaming subscription plan. Inother implementations such a guaranteed data connection may be madeavailable only if the use subscribes to a data access plan or if theuser subscribes to a higher tier of service that offers guaranteedsupport services.

In some cases the cost of the guaranteed data connection may be borne bya third party such as the provider of the MS-resident software thatrequires the diagnostic services. For instance, the cost may be borne bythe manufacturer of the MS operating system. In addition to performingthe conventional SIM functions, the diagnostic SIM may also containdiagnostic, configuration, or boot loader software that will help thediagnostic server with which it connects resolve any of a variety ofproblems with the MS by providing ROM images and operating system fixes,updates, patches, QFE's, and the like. In the same way the MS may beprovided with new operating system features and new applications.

In many cases it will be most convenient if the diagnostic SIM isimplemented on a hardware card, particularly if the MS has stoppedfunctioning entirely. However, the diagnostic SIM may also beimplemented as virtual SIM, which may be useful if the MS retains acertain degree of functionality. If the diagnostic SIM is implemented inhardware, it may be provided to the subscriber along with the mobilestation.

In one illustrative scenario, the diagnostic SIM may be used as follows.A user's MS malfunctions and the user cannot return it to an operationalstate. The user turns off the MS and removes the SIM card provided bythe mobile operator (MO) or mobile virtual network operator (MVNO) andreplaces it with the diagnostic SIM card. The user then restarts the MSand is prompted to establish a data connection in order the receiveinformation that will resolve the problem(s) with the MS. The prompt maybe initiated by software resident on the diagnostic SIM card, possiblyin combination with additional software resident in the MS itself. Aspreviously mentioned, data charges associated with the use of thevirtual SIM in a diagnostic mode may be borne by a third party such asthe provider of the MS-resident software that requires the diagnosticservices. The diagnostics then resolve the problem and return the MS toa known state or to a new/updated state, after which the user isprompted to re-insert their normal SIM card provided by the mobileoperator. In response to the prompt the user turns off the MS, removesthe diagnostic SIM card, inserts the normal SIM card and turns on theMS, which boots up into the known state or the new/updated state.

FIG. 4 is a flowchart illustrating one particular example of a methodfor associating a mobile station subscriber with at least oneapplication or service. The method begins in step 310 when a (SIM)identifier is received. The SIM identifier, which identifies a SIMassociated with a subscriber, may be received by downloading it to themobile station in the event that the SIM is a virtual SIM. The SIMidentifier is to be bound to at least one application or service thatthe subscriber is authorized to access over a wireless network. Next, instep 320 a wireless communication connection is established between amobile station in which the SIM is employed and an in order to perform aregistration process. The SIM identifier and the application(s) orservice(s) are registered with the HLR in step 330 so that the SIMidentifier is bound to the application or service. The application orservice is in addition to mobile telephony services offered by a mobileoperator and which are used to perform the registration process with theHRL.

The various memory units employed in the mobile station shown in FIG. 2are computer-readable media that represent any number and combination oflocal or remote devices, in any form, now known or later developed,capable of recording, storing, or transmitting computer-readable data,such as the instructions executable by processor CPU 402. In particular,computer-readable media may be, or may include, a semiconductor memory(such as a read only memory (“ROM”), any type of programmable ROM(“PROM”), a random access memory (“RAM”), or a flash memory, forexample); a magnetic storage device (such as a floppy disk drive, a harddisk drive, a magnetic drum, a magnetic tape, or a magneto-opticaldisk); an optical storage device (such as any type of compact disk ordigital versatile disk); a bubble memory; a cache memory; a core memory;a holographic memory; a memory stick; a paper tape; a punch card; or anycombination thereof.

Computer programs such as emulation software 230 employed in the virtualSIM represent any signal processing methods or stored instructions thatelectronically control predetermined operations on data. In general,computer-executable instructions are computer programs implemented assoftware components according to well-known practices forcomponent-based software development, and encoded in computer-readablemedia. Computer programs may be combined or distributed in various ways.

Functions/components described herein are not limited to implementationby any specific embodiments of computer programs. Rather, functions areprocesses that convey or transform data, and may generally beimplemented by, or executed in, hardware, software, firmware, or anycombination thereof, located at, or accessed by, any combination offunctional elements of the mobile station or the SIM.

It will be understood that all of the aspects of the subject matterdescribed herein need not be used in a particular implementation, normust the aspects, when used, be present concurrently.Functions/components described herein as being computer programs are notlimited to implementation by any specific embodiments of computerprograms. Rather, functions are processes that convey or transform data,and may generally be implemented by, or executed in, hardware, software,firmware, or any combination thereof.

Although the subject matter herein has been described in languagespecific to structural features and/or methodological acts, it is alsoto be understood that the subject matter defined in the claims is notnecessarily limited to the specific features or acts described above.Rather, the specific features and acts described above are disclosed asexample forms of implementing the claims.

It will further be understood that when one element is indicated asbeing responsive to another element, the elements may be directly orindirectly coupled. Connections depicted herein may be logical orphysical in practice to achieve a coupling or communicative interfacebetween elements. Connections may he implemented, among other ways, asinter-process communications among software processes, or inter-machinecommunications among networked computers.

As it is understood that embodiments other than the specific embodimentsdescribed above may be devised without departing from the spirit andscope of the appended claims, it is intended that the scope of thesubject matter herein will be governed by the following claims.

What is claimed is:
 1. A method performed on a computing device, themethod comprising: downloading, by the computing device via a wirelessnetwork, a virtual subscriber identity module (“SIM”) card that isconfigured for providing functionality of a plurality of physical SIMcards and that includes a distinct International Mobile SubscriberIdentity (“IMSI”) for each of the plurality of physical SIM cards;accessing, by the computing device, a service authorized to thecomputing device according to the downloaded virtual SIM card.
 2. Themethod of claim 1, where the computing device is a mobile device.
 3. Themethod of claim 1, where the virtual SIM replaces a physical SIM card onthe computing device.
 4. The method of claim 1, where the virtual SIM isencrypted.
 5. The method of claim 1, where the virtual SIM is utilizedby the computing device in conjunction with a physical SIM card.
 6. Themethod of claim 1, where the accessing is via a wireless network.
 7. Themethod of claim 1, where the virtual SIM is implemented in software onthe computing device.
 8. A computing device comprising: at least oneprocessor; and memory that is coupled to the at least one processor andthat includes computer-executable instructions that, based on executionby the at least one processor, configure the computing device to:download, via a wireless network, a virtual subscriber identity module(“SIM”) card that is configured for providing functionality of aplurality of physical SIM cards and that includes a distinctInternational Mobile Subscriber Identity (“IMSI”) for each of theplurality of physical SIM cards; access, by the computing device, aservice authorized to the computing device according to the downloadedvirtual SIM card.
 9. The computing device of claim 8, where thecomputing device is a mobile device.
 10. The computing device of claim8, where the virtual SIM replaces a physical SIM card on the computingdevice.
 11. The computing device of claim 8, where the virtual SIM isencrypted.
 12. The computing device of claim 8, where the virtual SIM isutilized by the computing device in conjunction with a physical SIMcard.
 13. The computing device of claim 8, where the service is accessedvia a wireless network.
 14. The computing device of claim 8, where thevirtual SIM is implemented in software on the computing device.
 15. Atleast one computer-readable storage device comprising: memory thatcomprises computer-executable instructions that, based on execution by acomputing device, configure the computing device to perform actionscomprising: downloading, by the computing device via a wireless network,a virtual subscriber identity module (“SIM”) card that is configured forproviding the functionality of a plurality of physical SIM cards andthat includes a distinct International Mobile Subscriber Identity(“IMSI”) for each of the plurality of physical SIM cards; accessing, bythe computing device, a service authorized to the computing deviceaccording to the downloaded virtual SIM card.
 16. The at least onecomputer-readable storage device of claim 15, where the computing deviceis a mobile device.
 17. The at least one computer-readable storagedevice of claim 15, where the virtual SIM replaces a physical SIM cardon the computing device.
 18. The at least one computer-readable storagedevice of claim 15, where the virtual SIM is encrypted and where theencrypted virtual SIM is stored in non-volatile memory of the computingdevice.
 19. The at least one computer-readable storage device of claim15, where the virtual SIM is utilized by the computing deviceconjunction with a physical SIM card.
 20. The at least onecomputer-readable storage device of claim 15, where the accessing is viaa wireless network, or where the virtual SIM is implemented in softwareon the computing device.